Annapolis Patient Sues Luminis Health Over Cyberattack Fallout

When you go to a hospital you expect your medical records to be safe, right? That trust was shaken in early September when a cyberattack slammed into Luminis Health’s network, affecting its two Maryland hospitals and a handful of outpatient centers.

One of those patients, Jokisha White, decided enough was enough. On Sept. 11 she filed a lawsuit against Luminis Health, the parent company of Anne Arundel Medical Center in Annapolis. In her filing, White claims the health system failed to put basic safeguards in place, essentially leaving her personal health information exposed to potential fraud.

The breach hit both the phone system and the MyChart online portal, which stayed down even after phone service was restored. For weeks, patients were left in the dark, unable to access test results, schedule appointments, or even verify their own medical histories.

White’s complaint doesn’t just point fingers at a technical glitch; it argues the hospital’s negligence created a “certainly impending” risk of identity theft and other fraud. The lawsuit seeks damages for the stress, inconvenience, and possible financial harm caused by the data exposure.

Luminis Health operates not only the Annapolis site but also a second hospital in Lanham, plus two outpatient surgery centers in Annapolis and Pasadena. The cyberattack has raised broader concerns about how regional health systems protect patient data, especially as ransomware and other threats become more sophisticated.

While the legal process unfolds, the hospital has promised to keep patients informed and to strengthen its cybersecurity measures. In the meantime, patients are encouraged to monitor their credit reports and stay vigilant for any suspicious activity.

The case adds to a growing list of healthcare providers across the nation grappling with the fallout from cyber incidents. As hospitals tighten security, patients like White hope the courts will send a clear message: protecting health data is not optional.